Sure. The approach seems like it works for you (so far), and sounds like it worked out well for whoever got money out of you.
But, please don't encourage others to put themselves at risk. aka fall for a scam on Ebay
But, please don't encourage others to put themselves at risk. aka fall for a scam on Ebay
you could get scammed or have your key deactivated a hundred times and still be ahead
At least, not without (at a minimum) having the SHA256 (or better) checksum of the ISO match that of the MSDN equivalent download.
and there's plenty of dumps of them kicking around if you don't